Empowers Windows Enterprise users to continue working anywhere with the assurance that their corporate data is protected.

MBAM enforces the BitLocker encryption policy options that you set for your enterprise, monitors the compliance of client computers with those policies, and reports on the encryption status of the enterprise’s and individual’s computers. In addition, MBAM lets you access the recovery key information when users forget their PIN or password, or when their BIOS or boot records change.

The following groups might be interested in using MBAM to manage BitLocker:

Administrators, IT security professionals, and compliance officers who are responsible for ensuring that confidential data is not disclosed without authorization

Administrators who are responsible for computer security in remote or branch offices

Administrators who are responsible for client computers that are running Windows

Architecture of MBAM service:

In this article I will describe the installation of MBAM 2.5 and integration with Configuration Manager 2012 R2.

This installation will involve three virtual servers: the domain controller, the ConfigMgr site server and SQL server, which will store the MBAM databases.

My SQL server already has default MSSQLSERVER instance with:

Database engine

Reporting services (native)

Management tools complete

and several instances for the family of products System Center. I need to add the Analysis services: